# POST /oauth2/token is deprecated

app.vssps.visualstudio.com deprecated POST /oauth2/token without giving a shutdown date yet.

The POST /oauth2/token endpoint is deprecated and scheduled for removal in 2026 without a specific shutdown date. Calls hitting this endpoint will eventually fail once it is removed. This affects existing Azure DevOps OAuth applications using the legacy authentication flow.

## What to use instead

Register an application in Microsoft Entra ID and request tokens from login.microsoftonline.com/{tenant}/oauth2/v2.0/token using the Azure DevOps scope 499b84ac-1321-427f-aa17-267ca6975798/.default. Moving requires a new app registration in a Microsoft Entra tenant rather than just changing an endpoint, and it does not work with personal Microsoft accounts.

Moving to Microsoft Entra ID OAuth needs a new app registration in a Microsoft Entra tenant; it does not work with personal Microsoft accounts.

- API: app.vssps.visualstudio.com (app.vssps.visualstudio.com)
- Kind: Endpoint removal
- Takes effect: no date given yet
- Calls after that day: fail
- Calls it hits: `POST /oauth2/token`
- Source: [Announcement](https://learn.microsoft.com/en-us/azure/devops/integrate/get-started/authentication/azure-devops-oauth)
- Verified: October 27, 2026, against app.vssps.visualstudio.com's own pages
- Page: https://www.okapi.bot/providers/app-vssps-visualstudio-com/breaking-changes/post-oauth2-token-is-deprecated/

## app.vssps.visualstudio.com's words

> Azure DevOps OAuth is deprecated and scheduled for removal in 2026. This documentation is for existing Azure DevOps OAuth apps only.

Okapi finds the calls this change hits in your repo and opens the pull request with the fix: https://github.com/apps/okapi-agent